Hybrid Senior Product Security Engineer

Salesforce, Inc.

Bellevue (WA)

Hybrid

USD 149,000 - 224,000

Full time

8 days ago

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

Salesforce is seeking a Senior Product Security Engineer to join the Platform Security team. The role focuses on securing the platform's integration layer, APIs, and connectors, with emphasis on threat modeling and secure-by-default guidance.

Hybrid work is available in San Francisco, CA, or Seattle/Bellevue, WA, and a strong emphasis on collaboration with product owners and engineers. You will review code in Java and other languages, mentor junior engineers, and help secure REST/GraphQL

Qualifications

5+ years of experience in product, application, or platform security.
Hands-on experience securing backend, integration, or service-connectivity systems, including API security.
Experience with OAuth 2.0, OpenID Connect, and JSON Web Tokens.
Source code review in Java and at least one other language (JS/TS/Python/Go) to confirm security risk.

Responsibilities

Lead threat modeling and security design reviews for event, messaging, and integration pathways, connectors, and APIs.
Secure service-to-service authentication and external client apps, addressing privilege, secret leakage, and access risks.
Build secure-by-default patterns into frameworks, SDKs, and onboarding paths; review Java, JavaScript, and TypeScript code to identify risks.
Partner with architects, engineers, and product owners to move findings to resolution and mentor junior security engineers.